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signals indicating if each data signal represents an acceptable state of the corresponding parameter. Test 
signals (32) are also supplied such that the sequence of status signals should form a recognisable pattern. A 
pattern recognition unit (40) compares arrays of status signals with reference pattems from a memory unit 
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(57) Abstract 



A monitoring system (10) examines data signals (12) from a plant or apparatus and provides status signals indicating if 
each data signal represents an acceptable state of the corresponding parameter. Test signals (32) are also supplied such that the 
sequence of status signals should form a recognisable pattern. A pattern recognition unit (40) compares arrays of status signals 
with reference patterns from a memory unit (68), several such reference patterns being compared in succession with «ach array so 
a desired sequence of matches and mismatches is obtained. The desired sequence may be such as to provide an input code to a 
pulse-coded logic guard line protection system (50). 
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Monitoring System 

This invention relates to a monitoring system for, and 
„ ....>thod of monitoring, industrial plants or apparatus, and 
one application of the invention is in nuclear reactors for 
the detection of fault conditions. 

A monitoring system is described in UK Patent GB 2 142 
206 B in which a test signal generator generates signals 
10 which are superimposed on data signals from a plant in such 
a way as to create a recognisable pattern of acceptable and 
unacceptable signals (as long as the data signals 
themselves all lie within acceptable limits). Correct 
operation of the plant and of the monitoring system is 
15 assured as long as the expected pattern is received. The 
received pattern represented as binary digits is compared 
to the expected pattern eight bits at a time, each bit (0 
or 1) representing an acceptable or unacceptable received 
signal. A dynamic output is generated by comparing the 
expected pattern to the received pattern (so it should 
match), and then to the next received pattern. An upper 
limit is placed on the frequency of the dynamic output by 
the time taken to receive all eight signals and to assess 
which are acceptable and which unacceptable. Although this 
monitoring system is suitable under some circumstances, it 
may sometimes be desirable to have a more rapidly 
oscillating dynamic output than this system can provide. 

According to the present invention there is provided a 
30 system for monitoring data signals from a plant or 

apparatus, each data signal representing a parameter of the 
plant or apparatus, the system comprising, means for 
examining the data signals and for providing status signals 
representing whether each data signal represents an 
35 acceptable or an unacceptable state of the respective 

parameter; means for supplying test signals in such a way 
that the examining means produces a recognisable pattern of 
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said status signals as long as the parameters remain in 
Tc^^ptable states, ana a pattern recognition means arranged 
to receive the said status signals, to form an --"^ °^ 
digits corresponding to a plurality of status signals and 
5 to compare the pattern of the array with a reference 

pattern, and to provide output signals representing the 
outcome of that comparison, the system also comprising a 
memory unit arranged to supply the reference P^"«" 
pattern recognition means, and means to cause the memory 

10 unit to supply a multiplicity of such reference patterns in 
succession for comparison with each said -"-yj^"' 
succession of reference patterns being such that a desired 
sequence of output signals is provided by the pattern 
recognition means as long as the parameters remain in the 

15 acceptable states. 

This technique of supplying the reference patterns 
enables a dynamic output of much higher frequency to be 
obtained, the upper limit to the frequency being set in 
20 practice by the storage capacity available in 

unit. For example a square wave output can be obtained at 
a frequency 256 times the rate at which new arrays are 
generated from the status signals, by arranging the memory 
unit to supply 256 successive reference patterns which are 

«^ ^r^A rii-F€erent from the pattern ot 
25 alternately the same as and difterenc it 

the array, for every different array. 

Not only can the dynamic output be of higher frequency 
than was possible with the previously known systems, but 

30 the system of the invention can be arranged to generate any 
desired output bit code, by suitable programming of the 
memory unit. In particular the memory unit can supply a 
succession of reference patterns such that the output 
signal is a binary code suitable as one input to a 

35 pulse-coded logic (PCL) guardline. 

A pulse-coded logic guardline system is described in 
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an article by B. Fast, in "Science and Technology of fast 
reactor safety", BNES, London, 1986. The systen, includes 
three PCL guardlines each of which includes its own pulse 
generator which is synchronised with those in the other 

5 guardlines, and which produces a respective repeating 

binary-coded pulse train A, B, or C. The coded pulses are 
supplied to instruments monitoring parameters of a plant 
(there are three instruments for each parameter, each 
receiving one of the pulse trains A, B, or C), and xf the 

0 instrument is un-tripped (i.e. the parameter has an 
acceptable value) then the received pulse train is 
distributed back to all three guardlines. Each guardlme 
votes on a two-out-of-three basis on the three coded pulse 
trains received from each instrument, giving a square-wave 

5 dynamic output as long as at least two of the pulse trains 
A, B, or C is received corresponding to each monitored 
parameter; the codes are however such that tripping of any 
one instrument can be identified, even though it does not 
trip the guardline itself. 

"° A variety of different repeating binary codes are 

suitable as PCL pulse-train inputs, depending on the voting 
strategy adopted (e.g. 2-out.of-4, or 3-out-of-4) and on 
how long a pulse train is desired. For example for 

25 2-out-of-3 voting, failure of any one instrument (stuck at 
0, or stuck at 1) can be identified using six bits of code, 
but typically a ten-bit or sixteen-bit code would be used. 
With an n-bit code it is apparent that the square-wave 
dynamic output from the guardline will be at a frequency 

30 n-times less than the frequency at which the binary code 
pulses are generated. 

The present invention thus enables a monitoring system 
using pattern recognition to be coupled dynamically to PCL 
35 guardlines, and it enables that coupling to be performed at 
a much higher frequency that that at which arrays are 
generated from the status signals, so that in spite of the 
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i„3vitable n-tin,es frequency decrease In the PCL guardlxne 
the output fron, the guardllne Is still o£ satxsf.ctorxly 
high frequency. Generating the PCL code in this way 
provides the further safety advantage that the code exists 
nowhere in the electronic circuitry forcing the system, 
except at the output from the pattern recognition unxt and 
so the correct PCL code can only be generated by correct 
operation of the circuitry. 

in the preferred embodiment the PCL code is an n-bit 
code, and N such n-bit codes are provided by the pattern 
recognition means in succession for any one array (« and n 
are positive integers), the memory unit supplies reference 
patterns to the pattern recognition means at a ^"^-"-^ 
Nxn times the frequency at which new arrays are 
last bit of the PCL code corresponds to a mis-match between 
the array and the reference pattern, the reference pattern 
supplied by the memory unit in creating the last bit of the 
Hth code is the same as the next expected array (and so 
should be a mis-match,, and the memory unit does not change 
its reference pattern as the next array is formed, 
consequently the number of reference patterns stored by the 
memory unit is l(Nxn)-U for each array of the pattern. 

The invention will now be further described by way of 
example only, and with reference to the accompanying 
drawings, in which 

Figure 1 shows a block diagram of a monitoring system; 

Figure 2 shows a block diagram of a plant protection 

system incorporating monitoring systems as in 
Figure 1; 

Figures 3a, 3b and 3c show graphically sixteen-bit 

binary codes for a plant protection system as 
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shown in Figure 2; and 

Figure 4 shows a block diagram of the pattern 

recognition unit of the monitoring system of 
5 Figure 1. 

Referring to Figure 1, a monitoring system 10 for 
monitoring temperatures at sixteen locations in a core of a 
nuclear reactor (not shown) has sixteen input terminals 12 

10 (only four are shown) to which leads carrying data signals 
from sixteen temperature sensors (not shown) are connected. 
Each input terminal 12 is connected to one input 14 of a 
respective two-input, signal adding-and-amplif ying unit 16 
(only four are shown), the other input 18 of which is 

15 connected to a test signal generating system 22. The 

output of each unit 16 is connected to a respective input 
of a sixteen input multiplexer 20, whose output is 
connected through an analogue-to-digital converter 24 to a 
signal analyser 30 arranged to provide an input to a 

20 pattern recognition unit 40 in response to a data request- 
signal from the unit 40. 

In operation of the monitoring system 10, the 
multiplexer 20 scans sequentially the signals it receives, 

25 which in the absence of signals from the test signal 

generating system 22 would correspond to the data signals 
representing the temperatures of the temperature sensors 
connected to the input terminals 12. At the end of each 
scan the polarity of the output from the multiplexer 20 is 

30 reversed, and the signal analyser 30 identifies this 

polarity change as signifying the beginning of a new scan. 
The signal received by the signal analyser 30 hence 
consists of a sequence of signals in digital form, each 
representing the temperature of one of the temperature 

35 sensors. The signal analyser 30 is a computer which, from 
the signal from each sensor: 

(a) calculates the corresponding temperature; 



wo 93/06537 



-6- 



PCr/GB92/01516 



20 



25 



30 



35 



(b) determines whether the temperature lies within 
predetermined acceptable limits for that sensor; 

(c) calculates the rate of change of temperature, from 
5 the calculated temperature and a memory of the 

previously calculated temperature; 

(d) determines whether the rate of change of 
temperature lies within predetermined acceptable 

10 limits for that sensor; 

(e) updates the memory of the temperature of that 
sensor if both the temperature and the rate of change 
of temperature lie within the respective limits; and 

(f) gives an output signal "l" if both the temperature 
and the rate of change of temperature are acceptable, 
or an output signal "0" if either the temperature or 
the rate of change of temperature are unacceptable. 

The test signal generating system 22 consists of a 
test signal generator 32 for producing a 

Signals in digital form, and connected by a data xnK 42 
the signal analyser 30 for receiving the memory of the 
current values of the temperatures of the sensors. The 
test signal generator 32 is connected through a dxgxtal-to- 
analogue converter 34 to the input of a sixteen output 
demultiplexer 36, the outputs of which are connected 
through'respective sample-and-hold amplifiers 33 (only or 
of which are shown) to the inputs 18 of the unxts 16, each 
amplifier 38 being adapted to generate a -^^^^^^/HH 
corresponding to the most recent signal recexved rem the 
demultiplexer 36 until it receives the next s.gnal from the 
demultiplexer 36. 

Thus the signals produced by the test signal generator 
32 are superinposed in analogue £or,n on the data sxgnals 
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from the sensors by the signal adding-and-amplif ying unxts 
16. some of the signals produced by the test signal 
generator 32, referred to as test signals, are such as to 
cause the multiplexer 20 and hence the signal analyser 30 
5 to receive a signal representing a temperature outside the 
acceptable limits, or representing a temperature 
corresponding to an unacceptable rate of change of 
temperature, while other signals from the test signal 
generator 32 have no such effect on the respective data 

10 signals. The test signal generator 32 is programmed to 

calculate suitable values of test signals, utilising where 
necessary the temperature values received from the signal 
analyser 30 via the data link 42, so as to result in a 
desired test pattern of acceptable and unacceptable 

15 signals, i.e. to produce a desired sequence of "0" and "1" 
output signals from the signal analyser 30. The presence 
of the desired pattern is then detected by the pattern 
recognition unit 40. 

20 It is clearly important for the test signal generator 

32 and the demultiplexer 36 to operate in phase, so that 
the test signals are supplied to the appropriate 
sample-and-hold amplifiers 38, and this is ensured by the 
use of timing signals provided by a timer 44. Timing 

25 signals from the timer 44 also control the multiplexer 20 
so that the multiplexer 20 performs one scan of the inputs 
it receives for every scan of the demultiplexer 36. 



30 is 



35 



in this example the complete pattern of test signals 
xs produced in eight scans of the multiplexer 20, the test 
signals being applied to the inputs 18 of a different 
selection of adding-and-amplif ying units 16 on successive 
scans of the multiplexer 20. The pattern is then repeated. 
The sequence of output signals from the signal analyser 30 
is shown in Table 1. It will be observed that with this 
pattern, each input is tested at least once; one input is 
tested twice, five are tested three times, five are tested 
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four times, three are tested five times, and one xs tested 
six times. (The hexadecimal equivalents of the first four 
sets of eight bits are given in brackets, the first bxt in 
each set being the least significant (units) digit). 

Table 1 



1st scan 2nd Scan 3ra Scan 4th Scan 



? i I 



0 0 

1 . i i 1 



0 



0 

0 1 



1 (3D) 0 (B4) 1 Q 

i ' ' S 

^ ^ 0 1 



0 9 ; 1 



1 1 



1 0 ^ 1 

^ ^ n 1 



0 



1 0 



0 

1 1 



0 0 



1 



0 



I (67) 0 (44) 1 \ 

0 Q__ i ■ 



5th scan 6th Scan 7th Scan . 8th Scan 



0 

1 n 1 1 

? ? 0 0 

0 ' \ 1 

0 0 J 1 

1 ^ ] 1 
1 ° 1 1 

0 0 1 ^ 

! ! : i 

■ I : 
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Ref erring to Figure 2, there is shown a plant 
protection system 50 which includes three monitoring 
systems 10 as described above, and which differ only in the 
binary code output signals provided by the respective 
5 pattern recognition units 40, identified as codes A, B, and 

C. These binary code output signals are supplied as inputs 
to an interface unit 52 forning part of a pulse-coded logic 
guardline 54. The guardline 54 also includes a pulse 
generator 56 which generates set and reset pulses, and a 

10 guardline monitor 58 which receives the set and reset 

pulses after their passage through the interface unit 52. 
(The pulse generator 56 also provides signals to 
synchronise operation of the monitoring systems 10). The 
set pulses are propagated through the interface unit 5 2 as 

15 long as two out of three of the code signals A, B, and C 

are 1; the reset pulses are propagated through the 
interface unit as long as two out of three of the code 
signals A, B, and C are 0. In this example the PCL codes 
are ten-bit codes, as indicated in Table 2, in which TO to 

20 T9 are successive time intervals: 

Table 2 



TO Tl T2 



25 CODE A 10 1 



T3 T4 T5 T6 T7 T8 T9 



1 1 0 1 0 0 0 



CODE B 1 1 0 1 

CODE C 1 1 1 0 



1 0 0 1 0 0 
1 0 0 0 1 0 



SET INPUT 111 



1 0 0 0 0 0 0 



30 RESET INPUT 0 0 0 0 



0 11110 



AS long as at least two of the monitoring systems 10 
provide respective codes A, B, or C, the guardline monitor 
58 receives a set pulse 1 at time TO, and receives a reset 
35 pulse 1 at time T5, and consequently generates a 

square-wave dynamic output signal. If any single one of 
the codes is stuck at 0 this will affect the receipt of the 
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set signal by the monitor 58 in time intervals Tl, T2 
and/or T3 (so the identity of the failed code can be 
deternined), while if any single one of the codes xs stuck 
at 1 this will affect the receipt of the reset sxgnal xn 
the time intervals T6, T7 and/or T8 (so the xdentxty of the 
failed code can be determined) . 

A plant protection system 50 may include several 
interfaces 52 in series between the pulse aenerator 56 and 
the monitor 58, each .ith its respective monitoring systems 
10. A system 50 may also include a different number of 
monitoring systems 10, for example tour Instead of three 
and the binary code signals might have a different number 
of bits, for example sixteen. Keferrin, now to Figures 3a, 
3b and 3C, sixteen-bit codes are shown graphically as 
follows: codes A, B and C suitable for a two-out-of-three 
voting guardline <Figure 3a,: codes A, B. C and 
for a three-out-of-four voting guardline (Figure 3b), and 
codes A, B, C and D suitable for a two-out-of-four voting 
guardline (Figure 3c,. In each case the outcome of the 
voting is Shown graphically. The time intervals Tl to T6 
enable any single code stuck at 0 to be identified, the 
intervals T9 to T14 enable a single code stuck at 1 to be 
identified. 

Referring now to Figure 4 a block diagram is shown of 
the pattern recognition unit 40 of the monitoring system 10 
of Figure 1. The unit 40 receives from the signal analyser 
30 signals representing the sequence of binary digits 
listed in Table 1, these signals being received eight bits 
at a time by an eight-bit comparator 60, every 16.4 
milliseconds, in response to a data request signal from a 
control logic unit 62 to the signal analyser 30. The 
control logic unit 62 receives timing signals from - -1°<=^ 
unit 64, and sends a control pulse every 64 microseconds to 
a twelve-bit counter 66. The output from the counter 66 is 
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supplied to a programmable read-only memory 68, so that it 
sends a new eight-bit reference pattern to the comparator 
60 every 64 microseconds. 

5 The memory 68 is programmed so that the binary output 

code provided by the comparator 6 0 is (by way of example) 
the A code suitable as an input for a two-out-of-f our PCL 
guardline, as shown in Figure 3c, that is to say 
1011111101010100, each digit being of duration 64 

10 microseconds. This requires the first reference pattern 
from the memory 68 to match the first eight-digit array 
received from the signal analyser (00111101, which is 3D in 
hexadecimal notation); the next reference pattern must not 
match, and is preferably 00000000 (= 00 in hexadecimal); 

15 the next reference pattern must match (=3D); the next must 
match (=3D) etc. 

The reference patterns are thus provided by the memory 
68 to the comparator 60 at a frequency 256 times higher 

20 than that at which eight-bit arrays are received from the 
signal analyser 30, so the sixteen-bit code A of Figure 3c 
is generated sixteen times for each new eight-bit array 
from the signal analyser 30. In this example the 256th 
reference pattern provided by the memory 68 is the same as 

25 the next eight-bit array 01100111 (= 67 in hexadecimal) 
expected from the signal analyser 30 and so will give a 
mismatch. The control logic unit 6 2 does not send any 
signal to the counter 66 when it sends the next data 
request signal to the signal analyser 30, so that when the 

30 next eight-bit array is received the comparator 60 will 

indicate a match with its current reference pattern. Thus 
the reference memory 68 stores all the patterns needed to 
generate 256 bits of output code A in just 255 memory 
addresses; the entire pattern from the signal analyser 30 

35 (see Table 1) consists of sixteen eight-bit arrays, so the 
reference memory 68 must have 16x255 = 4080 addresses in 
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each of which a reference pattern is stored. V.he„ the 
Toeoth reference pattern has been output the counter 66 .s 
reset to zero. 

« a Check on its correct operation the pattern 
recognition unit 40 also includes a cod. checKin, unxt 70 
to which the output fron. the comparator 60 xs suppl ed. 
The output is also supplied to an output veto gate 72 
controlled hy a dyna-ic latch 74, the latch 74 being 
controlled by the code checking unit 70. Every bit of the 
Tt^t PCL code is Checked against a hard-wired -de an 
the phase of the code is also checked, if the output is not 
Z Lpected code (i.e. code . of rigure 3c, - J" 

72 IS Closed and a trip warning indicator 76 is operated. 

It will be appreciated that the pattern recognition 
40 can be arranged to provide any desired PCL code by 
Tu tably programming the read-only nenory 68. or ^^^^^^J^" 
be arranged to provide any other desired output code such 
as Thigh freguency sguare wave. Bgually ^'^^J^l^TTrL 
„lth Which output code bits are provided ..ay -^««^^- 
that described above (once every 64 microseconds), this 

r^guency can be changed by changing the frequency at which 
the control logic unit 62 supplies control pulses to the 
25 counter 66. 



15 



20 
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Claims 



1. A system for monitoring data signals from a plant or 
apparatus, each data signal representing a parameter of the 

5 plant or apparatus, the system comprising, means (30) for 
examining the data signals and for providing status signals 
representing whether each data signal represents an 
acceptable or an unacceptable state of the respective 
parameter; means (32) for supplying test signals in such a 

10 way that the examining means (30) produces a recognisable 
pattern of said status signals as long as the parameters 
remain in acceptable states; and a pattern recognition 
means (60) arranged to receive the said status signals, to 
forn an array of digits corresponding to a plurality of 

15 status signals and to compare the pattern of the array with 
a reference pattern, and to provide output signals 
representing the outcome of that comparison, characterised 
by the system also comprising a memory unit (68) arranged 
to supply the reference pattern, to the pattern recognition 

20 means (60), and means (62, 64, 66) to cause the memory unit 
(68) to supply a multiplicity of such reference patterns in 
succession for comparison with each said array, the 
succession of reference patterns being such that a desired 
sequence of output signals is provided by the pattern 

25 recognition means (60) as long as the parameters remain m 
the acceptable states. 

2. A system as claimed in Claim 1 wherein the succession 
of reference patterns is such that the output signals are 

30 alternately zero and one. 

3. A system as claimed in Claim 1 wherein the succession 
of reference patterns is such that the sequence of the 
output signals is a binary code suitable as one input to a 

35 pulse-coded logic (PCL) guardline (54). 
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. syste. 3s Claimed in Clai. 3 wherein the said binary 
coae is an n-bit coae, and the .e.ory -t:,:^^::: 3t a 
reference patterns to the pattern recognxtxon means at 
reference p f reauency at which new arrays are 

frequency Nxn times the frequency 

I. „ r<ndes are provided by tne 

forned so that N such n-bit cooes are p ^^^^^ 
tornea succession for any one array 

pattern recognition means ^^.^ 
(N and n are positive integers); the last bit 
binary code corresponds to a mis-match, whereas the first 
Z the said binary code corresponds to a match, between 

supplied by the memory unit in creating the last bit 
Z code is the same as the next expected array, and no 
chanoTis made to the reference pattern from the memory 
unit as the next array is formed. 

S. A plant-monitoring system comprising at least three 
data-monitoring systems (10, as claimed 

4, the data-monitoring systems (10, P-"^^"^/^"^^^"' 
se,uences of output signals, and a pulse-coded logic 
guLline (54, to whose inputs the said se.3uences of 
output signals are provided. 
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